Tagged “ssrf”

Sep 4, 2026

MLflow SSRF (CVE-2026-64849): a validate-then-fetch bug

An unauthenticated SSRF in MLflow's webhook tester bypasses its own IP allowlist via redirects and DNS rebinding, reaching cloud metadata for live credentials.